Android Security (for Developers)
summary
Overview of the current state of mobile security covering apps, HTML5, BYOD and cloud interactions and their effects on user privacy, data security on devices and servers, and global entropy. Focuses on common web-application vulnerabilities and provides concrete examples and Android-specific details aimed at mobile app developers, with an attacker-oriented perspective.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 1:07Penetration testing and mobile security
- 2:10Android app stack
- 3:14Linux kernel and custom components
- 4:38Android SELinux and permissions
- 6:00App sandbox and root access
- 10:11Client-side attacks and device compromise
- 12:58Common Android attack vectors
- 14:23Compromised devices and billing risks
- 16:30User privacy and root access
- 18:34Wi-Fi hotspot attacks and Rogue AP
- 20:42SSL certificates and MITM
- 22:25Certificate verification in apps
- 24:54Mobile app security issues
- 27:02Reverse engineering APKs
- 29:11Logical protection and server-side
- 32:01Backend API risks
- 34:08OWASP Mobile Top 10
- 35:34Insecure data storage and sessions
- 37:39Client-side injection flaws
- 38:43Session and permission handling
- 39:26Third-party libraries and privacy
- 41:54Minimal permissions and best practices
related talks
42mDangers on Android: Vulnerabilities and Defenses
34mDemystifying Android Security
22mAndroid Security, an enterprise perspective
43mSecurity in Android Applications
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
37mSecuring our apps: anticipate threats, protect users
24mModern Android App Security: Protecting Code, Keys, and Data
48mMastering Android Security Research: A Guide for the Modern Security Researcher